hashicorp / hashicorp/consul

OIDC authentication and auditlog

Open
#16,796 2 comments 0 reactions 0 assignees View on GitHub
theme/acls theme/enterprise type/enhancement
Dominant language
Go
Stars
30.1k
Forks
4.6k
Avg merge
2d 6h
Merged PRs (30d)
43

Description

### Overview of the Issue
We're using OIDC/Azure AD to authenticate access in Consul UI,the claim mapping were created and when we turn on debug mode in Consul is possible to verify that user attributes are available to Consul. However, information about username or anything like this is not registered in audit logs.
We'd like to know if audit log feature is able to log this information or not. If so, could you provide any hint or documentation?

### Reproduction Steps
Configure Consul authentication as link below
https://support.hashicorp.com/hc/en-us/articles/14834216621971-Configuring-Azure-Active-Directory-AAD-with-Consul-using-OpenID-Connect-OIDC-

After that configure oidc authmetod to mapping Azure AD attributes with ClaimMappings

### Consul Version

Consul 1.15.1

### Browser and Operating system details

Consul is running as a docker container

Thanks in advance

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.